WO2021035922A1

WO2021035922A1 - Safety control method, fuel cell testing device, and storage medium

Info

Publication number: WO2021035922A1
Application number: PCT/CN2019/113130
Authority: WO
Inventors: 谭明波; 郝义国; 刘超
Original assignee: 武汉中极氢能产业创新中心有限公司
Priority date: 2019-08-29
Filing date: 2019-10-24
Publication date: 2021-03-04
Also published as: CN110556553B; CN110556553A

Abstract

Disclosed are a safety control method, a fuel cell testing device, and a storage medium. The method is applied to the fuel cell testing device. The method comprises: a safety processing component obtains safety related information of the fuel cell testing device from a process processing component; determine whether the fuel cell testing device has a first safety fault according to the safety related information to obtain a first determining result; and in the case that the first determining result indicates that the fuel cell testing device has a first safety fault, turn off power supplies other than the power supply of the safety processing component, and execute first fault processing corresponding to the first safety fault, wherein the first fault processing comprises at least one of the following steps: controlling a hydrogen supply electromagnetic valve and an air supply electromagnetic valve in the fuel cell testing device to be in a turn-off state and controlling a nitrogen purging electromagnetic valve to be in a turn-on state.

Description

Safety control method, fuel cell test device and storage medium

Cross-references to related applications

This disclosure is based on a Chinese patent application with an application number of 201910809921.5 and an application date of August 29, 2019, and claims the priority of the Chinese patent application. The entire content of the Chinese patent application is hereby incorporated into this application by way of introduction.

Technical field

The present disclosure relates to the field of fuel cells, and in particular to a safety control method, a fuel cell test device and a storage medium.

Background technique

The fuel cell generates electrical energy through the electrochemical reaction of hydrogen at the anode and oxygen (air) at the cathode on both sides of the membrane. The fuel cell stack needs a fuel cell test device to test the performance of the fuel cell stack before leaving the factory or before it is used to verify whether it can meet the set (or standard) technical indicators.

The fuel cell stack test device should be able to start the fuel cell stack under various given conditions and provide safety protection for the fuel cell stack to avoid unnecessary damage to the fuel cell stack under severe conditions.

Fuel cell test devices are used in laboratories or stack production lines. In order to ensure the operation of fuel cell stacks and test their performance, usually, the area where the test device is placed involves extremely dangerous hydrogen, and during the experiment or inspection process In this, a large amount of hydrogen is continuously sent to the anode of the fuel cell stack and used to generate electricity. Normally, a large amount of hydrogen is not completely consumed in the fuel cell stack, but is excluded from the battery. Therefore, the safety control and protection of the fuel cell test device is indispensable.

At present, the safety control of the fuel cell test device is handled by the Programmable Logic Controller (PLC). When a major safety risk failure occurs or there is an external emergency risk that requires an emergency shutdown, the process PLC is left at this time Dealing with faults and emergency shutdowns will reduce the speed of fault handling, and when it is necessary to cut off the power of the entire test device, the process PLC will not be able to handle it. There is no effective solution to this problem.

Summary of the invention

In view of this, the embodiments of the present disclosure are expected to provide a safety control method, a fuel cell test device, and a storage medium.

The technical embodiments of the embodiments of the present disclosure are implemented as follows:

The embodiments of the present disclosure provide a control method, the method is applied to a fuel cell test device, and the method includes:

The safety processing component obtains the safety related information of the fuel cell test device from the process processing component;

Judging whether the fuel cell test device has a first safety failure according to the safety-related information, and obtaining a first judgment result;

In the case where the first judgment result indicates that the fuel cell test device has a first safety fault, turn off other power supplies except the power supply of the safety processing component, and execute the first safety fault corresponding to the first safety fault. One troubleshooting;

The first fault processing includes at least one of the following: controlling the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to be in an off state, and controlling the nitrogen purge solenoid valve to be in an on state.

In an optional embodiment of the present disclosure, the abnormal safety related information corresponding to the first safety fault includes at least one of the following:

The wind force of the exhaust system in the fuel cell test device is less than a preset level;

The hydrogen concentration in the fuel cell test device exceeds a preset alarm concentration;

The emergency shutdown command of the fuel cell test device.

In an optional embodiment of the present disclosure, in a case where the first judgment result indicates that the fuel cell test device does not have a first safety failure, the method further includes:

The safety processing component and the process processing component determine whether the fuel cell test device has safety faults other than the first safety fault according to the safety-related information, and obtain a second judgment result;

In the case where the second judgment result indicates that the fuel cell test device has the other safety fault, perform fault processing corresponding to the other safety fault.

In an optional embodiment of the present disclosure, the other safety fault includes: a second safety fault;

The second fault processing corresponding to the second safety fault includes at least one of the following: controlling the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to be in an off state, and controlling the nitrogen purge solenoid valve to be on Status, open Nitrogen to purge hydrogen pipes and air pipes within a preset time.

In an optional embodiment of the present disclosure, the abnormal safety related information corresponding to the second safety fault includes at least one of the following:

The pressure value of hydrogen exceeds the hydrogen pressure alarm setting value; the pressure value of air exceeds the air pressure alarm setting value; the pressure difference between hydrogen and air exceeds the alarm setting value of the hydrogen and air pressure difference; the inlet temperature of hydrogen exceeds the hydrogen inlet temperature Temperature alarm setting value; air intake temperature exceeds the air intake temperature alarm setting value; cooling water conductivity exceeds the cooling water conductivity alarm setting value; single-chip battery voltage exceeds the single-chip battery voltage setting range; single-chip The battery voltage is reversed; the electronic load current exceeds the electronic load current alarm setting value; the electronic load voltage exceeds the electronic load voltage alarm setting value; the electronic load power exceeds the electronic load power alarm setting value.

In an optional embodiment of the present disclosure, the other safety fault includes: a third safety fault;

The third fault processing corresponding to the third safety fault includes at least one of the following: when the fuel cell test device is in the test process, the next test item is not started; when the fuel cell test device is not in the test process And if the third safety fault has not been processed, the next test project is not started; the first prompt message corresponding to the third safety fault is output.

In an optional embodiment of the present disclosure, the abnormal safety related information corresponding to the third safety fault includes at least one of the following:

The hydrogen water vapor separation filling level exceeds the hydrogen water vapor separation filling level alarm setting value; the air water vapor separation filling level exceeds the air water vapor separation filling level alarm setting value; the sensor on the hydrogen exhaust pipe has a fault, the air exhaust pipe There is a fault on the sensor, the hydrogen humidification filling level exceeds the hydrogen humidification filling level alarm setting value; the air humidification filling level exceeds the air humidification filling level alarm setting value; the hydrogen exhaust temperature exceeds the hydrogen exhaust temperature alarm setting The conductivity of the air humidification water exceeds the alarm setting value of the air humidification water conductivity; the conductivity of the hydrogen humidification water exceeds the alarm setting value of the hydrogen humidification water conductivity.

In an optional embodiment of the present disclosure, the other safety faults include: a fourth safety fault; the fourth safety fault is a fault that does not affect the operation of the fuel cell test device;

The fourth fault processing corresponding to the fourth safety fault includes: outputting second prompt information corresponding to the fourth safety fault.

The embodiments of the present disclosure provide a fuel cell test device, the device includes: a safety processing component, a process processing component and other components for performing fuel cell testing, wherein:

The process processing component is configured to obtain safety-related information of the fuel cell test device, and send the safety-related information to the safety processing component; the safety-related information is information related to the other components;

The safety processing component is configured to determine, based on the safety-related information, whether the fuel cell test device has a first safety failure, and obtain a first determination result; when the first determination result indicates that the fuel cell test device has a first safety failure In the case of a safety fault, turn off other power supplies except the power supply of the safety processing component, and execute the first fault processing corresponding to the first safety fault; the first fault processing includes at least one of the following: The hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device are controlled to be in an off state, and the nitrogen purge solenoid valve is controlled to be in an on state.

The emergency shutdown command of the fuel cell test device.

In an optional embodiment of the present disclosure, when the first judgment result indicates that the fuel cell test device does not have a first safety failure;

The process processing component and the safety processing component are further configured to determine whether the fuel cell test device has safety faults other than the first safety fault according to the safety-related information, and obtain a second judgment result; If the second judgment result indicates that the fuel cell testing device has the other safety fault, perform fault processing corresponding to the other safety fault.

The hydrogen water vapor separation filling level exceeds the hydrogen water vapor separation filling level alarm setting value; the air water vapor separation filling level exceeds the air water vapor separation filling level alarm setting value; the sensor on the hydrogen exhaust pipe is faulty, the air exhaust pipe There is a fault on the sensor, the hydrogen humidification filling level exceeds the hydrogen humidification filling level alarm setting value; the air humidification filling level exceeds the air humidification filling level alarm setting value; the hydrogen exhaust temperature exceeds the hydrogen exhaust temperature alarm setting The conductivity of the air humidification water exceeds the alarm setting value of the air humidification water conductivity; the conductivity of the hydrogen humidification water exceeds the alarm setting value of the hydrogen humidification water conductivity.

The embodiments of the present disclosure provide a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, any step of the above-mentioned method is implemented.

The safety control method, fuel cell test device, and storage medium provided by the embodiments of the present disclosure include: a safety processing component obtains safety-related information of the fuel cell test device from a process processing component; and judges based on the safety-related information Whether the fuel cell test device has a first safety failure, obtain a first judgment result; in the case that the first judgment result indicates that the fuel cell test device has a first safety failure, shut down and remove the safety processing component Other power sources other than the power supply of the fuel cell, and execute the first fault processing corresponding to the first safety fault; the first fault processing includes at least one of the following: controlling the hydrogen supply solenoid valve and the air in the fuel cell test device The supply solenoid valve is in the off state, and the control nitrogen purge solenoid valve is in the on state. By adopting the technical solution of the embodiment of the present disclosure, when the first judgment result indicates that the fuel cell test device has a first safety failure, the other power sources except the power supply of the safety processing component are turned off, and The first fault processing corresponding to the first safety fault is executed, so that when the entire fuel cell test device is powered off, the safety processing component still has a power supply, and the fault can still be processed, and the fault processing speed is also greatly improved.

Description of the drawings

FIG. 1 is a schematic diagram of the implementation process of a security control method according to an embodiment of the disclosure;

2 is a schematic diagram of a fuel cell test device according to an embodiment of the disclosure;

3 is a schematic diagram of another implementation process of a security control method according to an embodiment of the disclosure;

4A is an electrical schematic diagram of power supply for each device in a safety control method according to an embodiment of the disclosure;

4B is a schematic diagram of the startup process of the fuel cell test device in a safety control method according to an embodiment of the disclosure;

4C is a schematic flowchart of a security control method according to an embodiment of the disclosure;

5 is a schematic diagram of the composition structure of a fuel cell test device according to an embodiment of the disclosure;

FIG. 6 is a schematic diagram of the hardware physical structure of a fuel cell test device in an embodiment of the disclosure.

detailed description

In order to make the objectives, technical solutions, and advantages of the embodiments of the present disclosure clearer, the specific technical solutions disclosed in the following will be described in further detail in conjunction with the accompanying drawings in the embodiments of the present disclosure. The following embodiments are used to illustrate the present disclosure, but are not used to limit the scope of the present disclosure.

FIG. 1 is a schematic diagram of the implementation process of a safety control method according to an embodiment of the disclosure. The method is applied to a fuel cell test device. As shown in FIG. 1, the method includes:

Step S101: the safety processing component obtains safety related information of the fuel cell test device from the process processing component.

It should be noted that the fuel cell testing device can be any device that can provide testing for fuel cells. As an example, the fuel cell testing device can be a fuel cell stack testing device. In order to facilitate understanding, FIG. 2 is a schematic diagram of a fuel cell test device according to an embodiment of the disclosure. As shown in FIG. 2, only some of the components in the fuel cell test device are shown in FIG. 2, and the other devices are not one by one. Draw out.

Here, the safety processing component obtains the safety-related information of the fuel cell test device from the process processing component, where the process processing component may include a process controller. As an example, the process controller may be a process PLC; The safety processing component may include a safety processor. As an example, the safety processor may be a safety PLC; the safety-related information may be measured values of all safety-related process variables. Since the fuel cell test device can transmit all safety-related process variables measurement values to the process processing component during the test, the safety processing component can obtain the fuel cell test device's information from the process processing component. Security related information.

Step S102: Determine whether the fuel cell test device has a first safety failure according to the safety-related information, and obtain a first determination result.

Here, the safety processing component may pre-store abnormal safety related information corresponding to various safety failure categories, and the abnormal safety related information corresponding to the safety failure category may include at least the abnormal safety related information corresponding to the first safety failure, The abnormal safety related information corresponding to the second safety failure, the abnormal safety related information corresponding to the third safety failure, the abnormal safety related information corresponding to the fourth safety failure, etc., the safety failure category is classified according to the severity of the safety failure.

The abnormal safety-related information corresponding to the safety failure category may include at least the abnormal safety-related information corresponding to the first safety failure with the highest severity. When the abnormal safety-related information corresponding to the first safety failure occurs, it may cause heavy casualties. And major property losses, so it is necessary to discover the abnormal safety-related information corresponding to the first safety failure in time. As an example, the abnormal safety related information corresponding to the first safety fault includes at least one of the following: the wind power of the exhaust system in the fuel cell test device is less than a preset level; the hydrogen gas in the fuel cell test device The concentration exceeds the preset alarm concentration; the emergency shutdown command of the fuel cell testing device.

The judging whether the fuel cell testing device has a first safety failure according to the safety-related information, and obtaining the first judgment result may be corresponding to judging whether the fuel cell testing device has a first safety failure according to the safety-related information Abnormal safety-related information, when there is abnormal safety-related information corresponding to the first safety fault in the safety-related information, a first judgment result is obtained, and the first judgment result indicates that the fuel cell test device has a first safety fault; When there is no abnormal safety related information corresponding to the first safety failure in the safety related information, a first judgment result is obtained, and the first judgment result indicates that the fuel cell testing device does not have a first safety failure. As an example, the abnormal safety-related information corresponding to the first safety failure in the safety-related information may include at least one of the following: the wind power of the exhaust system in the fuel cell test device is less than a preset level; the fuel The hydrogen concentration in the battery test device exceeds the preset alarm concentration; the emergency shutdown command of the fuel cell test device.

In practical applications, the wind power of the exhaust system in the fuel cell test device is less than a preset level. The wind detector can detect that the wind power of the exhaust system in the fuel cell test device is less than 3 levels. Under normal circumstances, the wind of the exhaust system is generally greater than level 3. When the air flow detector detects that the wind of the exhaust system is less than level 3, the exhaust is not smooth at this time, and the test bench may face hydrogen leakage and cannot be quickly discharged outdoors. Due to the extremely high risk of hydrogen, it may cause heavy casualties and heavy property losses.

The hydrogen concentration in the fuel cell test device exceeds the preset alarm concentration. The combustible gas detector can detect that the hydrogen concentration in the fuel cell test device exceeds the preset alarm concentration. At this time, the test bench is in a severely unsafe state. .

The emergency shutdown command of the fuel cell test device may be an emergency shutdown command for the operator to activate an emergency shutdown switch arranged on the test bench or remotely trigger the fuel cell test device.

Step S103: When the first judgment result indicates that the fuel cell test device has a first safety failure, shut off other power sources except the power supply of the safety processing component, and execute the first safety failure Corresponding to the first fault processing.

In practical applications, when the fuel cell test device has the first safety failure, an emergency stop command is generally initiated to shut off the power supply of the entire test bench. The process processing components cannot work without the power supply, but in this step In the case where the first judgment result indicates that the fuel cell test device has a first safety fault, turn off other power supplies except the power supply of the safety processing component, and execute the corresponding first safety fault The first fault processing can ensure that after an emergency shutdown, the safety processing component still has a power supply, and the safety processing component can still handle the fault, thereby eliminating the fault.

Step S104: The first fault processing includes at least one of the following: controlling the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to be in an off state, and controlling the nitrogen purge solenoid valve to be in an on state.

Here, controlling the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to be in the off state may be to control the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to lose power and cut off the hydrogen supply. And air supply; control the nitrogen purge solenoid valve to be in the on state, and the nitrogen purge solenoid valve can be controlled to lose power to make it in the on state, mainly because the nitrogen purge solenoid valve is a de-energized normally open valve. In practical applications, the first fault processing may also include outputting the prompt information corresponding to the first safety fault. The output of the prompt information can be achieved by illuminating a certain number of indicators of different colors or illuminating a certain specific indicator. The mode of the color indicator light to indicate this type of safety fault is not limited here. As an example, when it is determined to be the first safety fault, the red and yellow indicator lights may be constantly on to indicate the first safety fault. After the first fault is processed, the red and yellow indicators The light no longer lights up, that is, both the red and yellow indicator lights are off.

According to the safety control method provided by the embodiments of the present disclosure, the safety processing component obtains the safety related information of the fuel cell test device from the process processing component; judges whether the fuel cell test device has a first safety failure according to the safety related information, and obtains A first judgment result; in the case where the first judgment result indicates that the fuel cell test device has a first safety failure, shut off other power sources except the power supply of the safety processing component, and execute the first The first fault processing corresponding to the safety fault; the first fault processing includes at least one of the following: controlling the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to be in an off state, and controlling the nitrogen purge solenoid valve In the on state. By adopting the technical solution of the embodiment of the present disclosure, when the first judgment result indicates that the fuel cell test device has a first safety failure, the other power sources except the power supply of the safety processing component are turned off, and The first fault processing corresponding to the first safety fault is executed, so that when the entire fuel cell test device is powered off, the safety processing component still has a power supply, and the fault can still be processed, and the fault processing speed is also greatly improved.

The embodiment of the present disclosure provides yet another security control method. FIG. 3 is a schematic diagram of another implementation process of the security control method according to the embodiment of the disclosure. As shown in FIG. 3, the method includes:

In step S201, the safety processing component obtains safety related information of the fuel cell test device from the process processing component.

For step S201 in this embodiment, reference may be made to the description of step S101 in the foregoing embodiment, which will not be repeated here.

Step S202, judging whether the fuel cell testing device has a first safety failure according to the safety-related information, and obtaining a first judgment result.

For step S202 in this embodiment, reference may be made to the description of step S102 in the foregoing embodiment, which will not be repeated here.

Step S203, when the first judgment result indicates that the fuel cell test device has a first safety fault, turn off other power sources except the power supply of the safety processing component, and execute the first safety fault Corresponding to the first fault processing.

For step S203 in this embodiment, reference may be made to the description of step S103 in the foregoing embodiment. The first fault processing may include at least one of the following: controlling the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to be in an off state, and controlling the nitrogen purge solenoid valve to be in an on state.

It should be noted that controlling the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to be in the off state can control the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to lose power. Cut off the hydrogen supply and air supply; control the nitrogen purge solenoid valve to be in the on state. You can control the nitrogen purge solenoid valve to lose power to make it in the on state, mainly because the nitrogen purge solenoid valve is a de-energized normally open valve. In practical applications, the first fault processing may also include outputting the prompt information corresponding to the first safety fault. The output of the prompt information can be achieved by illuminating a certain number of indicators of different colors or illuminating a certain specific indicator. Color indicator lights are used to indicate this type of safety fault. As an example, when the first safety fault is determined, both the red and yellow indicator lights can be turned on to indicate the first safety fault. After the first fault is processed, the red and yellow indicator lights are no longer on.

Step S204: In the case where the first judgment result indicates that the fuel cell test device does not have a first safety failure, the safety processing component and the process processing component determine whether the fuel cell test device is There are other safety faults other than the first safety fault, and a second judgment result is obtained.

In an optional embodiment of the present disclosure, the other safety faults may be classified according to the severity of the safety fault. As an example, the other safety faults may at least include: a second safety fault, a third safety fault 4. The fourth safety fault, where the second safety fault is a very serious fault, which may cause damage to the equipment in the test device or damage to the fuel cell stack under test, thereby affecting the safety of persons and equipment; The third safety fault is a fault with a relatively high severity, and long-term failure operation may cause general damage to the equipment in the test device or general loss of the DUT; the fourth safety fault is a fault with a general severity. It can be a warning fault, which may cause some uncritical data to be inaccurate or the redundant configuration lacks a safe backup, which requires attention and timely processing.

The safety processing component and the process processing component determine whether the fuel cell test device has safety faults other than the first safety fault according to the safety-related information, and obtaining the second judgment result may include the safety processing component and the process The processing component judges whether the fuel cell test device has a second safety fault other than the first safety fault according to the safety-related information, and obtains a second judgment result. Specifically, the safety processing component and the process processing component determine whether the fuel cell testing device has abnormal safety related information corresponding to the second safety fault according to the safety related information, and when the safety related information contains the first When the abnormal safety-related information corresponding to the second safety failure, the second judgment result indicates that the fuel cell test device has the second safety failure; when the safety-related information does not contain the abnormality corresponding to the second safety failure In the case of safety-related information, the second judgment result indicates that the fuel cell testing device does not have the second safety fault. As an example, the abnormal safety related information corresponding to the second safety fault includes at least one of the following:

Here, the alarm setting value can be set according to actual conditions, which is not limited here.

The safety processing component and the process processing component determine whether the fuel cell test device has safety faults other than the first safety fault according to the safety-related information, and obtaining the second judgment result may include the safety processing component and the process The processing component determines whether the fuel cell test device has a third safety fault other than the first safety fault and the second safety fault according to the safety-related information, and obtains a second judgment result. Specifically, the safety processing component and the process processing component determine whether the fuel cell test device has abnormal safety-related information corresponding to the third safety fault according to the safety-related information, and when the safety-related information contains the first safety-related information When the abnormal safety-related information corresponding to the three safety faults, the second judgment result indicates that the fuel cell test device has the third safety fault; when the safety-related information does not contain the abnormality corresponding to the third safety fault In the case of safety-related information, the second judgment result indicates that the fuel cell testing device does not have the third safety fault. As an example, the abnormal safety related information corresponding to the third safety fault includes at least one of the following: the hydrogen water vapor separation filling level exceeds the hydrogen water vapor separation filling level alarm setting value; the air water vapor separation filling level exceeds the air water vapor Separate filling level alarm setting value; the sensor on the hydrogen exhaust pipe is faulty, the sensor on the air exhaust pipe is faulty, the hydrogen humidification filling level exceeds the hydrogen humidification filling level alarm setting value; the air humidification filling level Exceeds the air humidification filling level alarm setting value; the hydrogen exhaust temperature exceeds the hydrogen exhaust temperature alarm setting value; the conductivity of the air humidification water exceeds the alarm setting value of the air humidification water; the conductivity of the hydrogen humidification water exceeds the hydrogen humidification water Conductivity alarm setting value.

The safety processing component and the process processing component determine whether the fuel cell test device has safety faults other than the first safety fault according to the safety-related information, and obtaining the second judgment result may include the safety processing component and the process The processing component judges whether the fuel cell testing device has a fourth safety fault other than the first safety fault, the second safety fault and the third safety fault according to the safety-related information, and obtains a second judgment result. Specifically, the safety processing component and the process processing component determine whether the fuel cell testing device has abnormal safety related information corresponding to the fourth safety fault according to the safety related information, and when the safety related information contains the first When the abnormal safety-related information corresponding to the four safety failures, the second judgment result indicates that the fuel cell testing device has the fourth safety failure; when the safety-related information does not contain the abnormality corresponding to the fourth safety failure In the case of safety-related information, the second judgment result indicates that the fuel cell testing device does not have the fourth safety fault. As an example, the fourth safety failure is a failure that does not affect the operation of the fuel cell test device; specifically, it may be a sensor failure that does not participate in the control, and the temperature difference between the inlet and outlet of the cooling water exceeds a set value and does not affect the equipment and The operation failure of the tested fuel cell stack will not damage the fuel cell testing device or the tested cell stack, and will not cause personal injury.

Step S205, in a case where the second judgment result indicates that the fuel cell test device has the other safety fault, perform fault processing corresponding to the other safety fault.

In an optional embodiment of the present disclosure, when the other safety fault is a second safety fault, the second fault processing corresponding to the second safety fault may include at least one of the following: controlling the fuel cell test The hydrogen supply solenoid valve and the air supply solenoid valve in the device are in the off state, the nitrogen purge solenoid valve is controlled to be in the on state, and the nitrogen purge hydrogen pipeline and the air pipeline are opened within a preset time, and the second safety fault is output Corresponding prompt information.

Here, controlling the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to be in the off state may be to control the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to lose power and cut off the hydrogen supply. And air supply; control the nitrogen purge solenoid valve to be in the conducting state, open the nitrogen to purge the hydrogen pipeline and the air pipeline within a preset time. Among them, you can control the nitrogen purge solenoid valve to lose power to make it in the conducting state, mainly due to The nitrogen purge solenoid valve is a power failure normally open valve; the preset time can be determined according to actual conditions and is not limited here. As an example, the preset time can be nitrogen purge hydrogen pipes and air pipes Five minutes; output the prompt information corresponding to the second safety fault by lighting a certain color indicator to prompt this type of safety fault. As an example, when it is determined to be the second safety fault, you can By illuminating only the red indicator light, it is indicated as the second safety fault. After the second fault is processed, the red indicator light is no longer lit, that is, both the red and yellow indicator lights are off.

In an optional embodiment of the present disclosure, when the other safety fault is a third safety fault, the third fault processing corresponding to the third safety fault includes at least one of the following: In the case of the test process, do not start the next test item; in the case that the fuel cell test device is not in the test process and the third safety fault has not been processed, do not start the next test item; output the The first prompt message corresponding to the third safety fault.

Here, when the other safety failure is the third safety failure, the safety processing component can determine whether the fuel cell test device is in the test process, and when the fuel cell test device is in the test process, the current test process is completed After the completion of this test process, if the third safety fault is not processed, the next test item will not be started; when the fuel cell test device is not in the test process, if the third safety fault If the fault has not been processed, the test project will not be started.

In an optional embodiment of the present disclosure, when the other safety fault is a fourth safety fault, the fourth fault processing corresponding to the fourth safety fault includes: outputting the second safety fault corresponding to the fourth safety fault. Prompt information.

Here, the second prompt message may be prompted by lighting or flashing an indicator light of a certain color to prompt the fourth safety fault, for example, when the yellow indicator light flashes, the prompt is the fourth safety fault.

For ease of understanding, here is an example. Assume that the safety processing component is a safety PLC and the process processing component is a process PLC. FIG. 4A is an electrical schematic diagram of power supply for each device in a safety control method according to an embodiment of the disclosure, as shown in FIG. 4A In Figure 4A, the power supply for the safety PLC and the multi-color indicator light can be the same power supply. When the safety PLC determines that the fuel cell test device has the first safety fault based on safety-related information, the safety PLC can be shut down and removed. Power supply other than the power supply of the power supply, that is, only keep the contactor K4 in Figure 4A closed, and disconnect the safety relay K1, the safety relay K2, the contactor K3, and the contactor K5, to ensure that in addition to the safety PLC power supply and multi-color indication Power supplies other than the power supply of the lamp power supply are disconnected, so that the safety PLC can still handle the fault, thereby eliminating the fault. Since the disconnected other power supplies involve many types, they are not listed here.

FIG. 4B is a schematic diagram of the startup process of the fuel cell test device in a safety control method according to an embodiment of the disclosure. As shown in FIG. 4B, the fuel cell test device is described in FIG. Information to determine whether the fuel cell test device has safety failures of different severity. Generally, the safety failures of different severity can start from the most severe safety failure to the least severe safety failure; that is, when the fuel cell After the test device is turned on, when the contactor K4 is closed, the safety PLC judges whether there is a first safety fault with the highest severity. If there is a first safety fault, the red and yellow indicator lights in the multi-color indicator light are on, and wait After the first safety fault is processed, the red and yellow indicator lights will go out. Based on the fact that the red and yellow indicator lights are both off, it means that the fuel cell test device does not have the first safety fault, and the safety relay K1 and contactor K3 will be closed. , The safety PLC and the process PLC judge whether there is a second safety fault with a very high degree of severity. If there is a second safety fault, the red indicator light in the multi-color indicator light is on, and after the second safety fault is processed, the red indicator light Will go out. Based on the fact that the red indicator light is off, it means that the fuel cell test device does not have a second safety fault. The safety relay K2 and the contactor K5 will be closed. The safety PLC and the process PLC will determine whether there is a third safety fault with a higher severity. The third safety fault, the yellow indicator light in the multi-color indicator light is on, and after the third safety fault is processed, the yellow indicator light will go out. Based on the fact that the yellow indicator light is off, it means that the fuel cell test device does not have a third safety fault. , The fuel cell test device can start the test project, and during the test, the safety PLC and the process PLC will also determine whether there is a fourth safety fault with a lower severity. If there is a fourth safety fault, the indicator in the multi-color indicator The yellow indicator light will flash to remind you to deal with it as soon as possible, but it will not affect the test of the test item.

Fig. 4C is a schematic flow chart of a safety control method according to an embodiment of the disclosure; as shown in Fig. 4C, in Fig. 4C, the safety PLC obtains the safety-related information of the fuel cell test device from the process PLC, according to the The safety-related information determines whether the fuel cell testing device has a safety fault. When there is a safety fault, it is further judged to belong to several types of safety faults, that is, it is determined that the safety fault belongs to only the first safety fault; if there is no first safety fault, there is a second safety fault. Safety failure; no first and second safety failures, there is a third safety failure; and only a few types of safety failures in the fourth safety failure, and then based on the corresponding safety failure to control the corresponding device power supply, so as to take the corresponding operation. Here, the detailed description of the control method and the corresponding operation can refer to the description in the foregoing embodiment, which will not be repeated here. According to the safety control method provided by the embodiments of the present disclosure, the safety processing component obtains the safety related information of the fuel cell test device from the process processing component; judges whether the fuel cell test device has a first safety failure according to the safety related information, and obtains The first judgment result; in the case that the first judgment result indicates that the fuel cell test device does not have a first safety failure, the safety processing component and the process processing component determine the fuel cell test based on the safety-related information Whether the device has other safety failures other than the first safety failure, obtain a second judgment result; in the case where the second judgment result indicates that the fuel cell test device has the other safety failures, execute the other safety Fault handling corresponding to the fault. By adopting the technical solutions of the embodiments of the present disclosure, when the first judgment result indicates that the fuel cell test device does not have a first safety failure, the safety processing component and the process processing component determine according to the safety-related information Whether the fuel cell testing device has other safety faults other than the first safety fault, obtain a second judgment result; in the case that the second judgment result indicates that the fuel cell testing device has the other safety faults, Perform fault processing corresponding to the other safety faults, thereby greatly improving the fault processing speed.

This embodiment proposes yet another control device. FIG. 5 is a schematic diagram of the composition structure of a fuel cell test device according to an embodiment of the disclosure. As shown in FIG. 5, the device 300 includes: a safety processing component 301, a process processing component 302, and Other components 303 used for fuel cell testing, including:

The process processing component 302 is configured to obtain safety-related information of the fuel cell test device, and send the safety-related information to the safety processing component; the safety-related information is information related to the other components 303 .

The safety processing component 301 is configured to determine whether the fuel cell test device has a first safety failure based on the safety-related information, and obtain a first judgment result; when the first judgment result indicates that the fuel cell test device exists In the case of a first safety fault, turn off other power supplies except the power supply of the safety processing component, and execute the first fault processing corresponding to the first safety fault; the first fault processing includes at least one of the following : Control the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to be in the off state, and control the nitrogen purge solenoid valve to be in the on state.

In other embodiments, the abnormal safety related information corresponding to the first safety fault includes at least one of the following:

The emergency shutdown command of the fuel cell test device.

In other embodiments, when the first judgment result indicates that the fuel cell test device does not have a first safety failure;

The process processing component 302 and the safety processing component 301 are further configured to determine whether the fuel cell test device has safety faults other than the first safety fault according to the safety related information, and obtain a second judgment result; In the case where the second judgment result indicates that the fuel cell test device has the other safety fault, perform fault processing corresponding to the other safety fault.

In other embodiments, the other safety fault includes: a second safety fault;

In other embodiments, the abnormal safety related information corresponding to the second safety fault includes at least one of the following:

In other embodiments, the other safety fault includes: a third safety fault;

In other embodiments, the abnormal safety related information corresponding to the third safety fault includes at least one of the following:

In other embodiments, the other safety failure includes: a fourth safety failure; the fourth safety failure is a failure that does not affect the operation of the fuel cell test device;

The description of the above device embodiment is similar to the description of the above method embodiment, and has similar beneficial effects as the method embodiment. For technical details that are not disclosed in the device embodiments of the present disclosure, please refer to the description of the method embodiments of the present disclosure for understanding.

It should be noted that, in the embodiments of the present disclosure, if the above control method is implemented in the form of a software function module and sold or used as an independent product, it can also be stored in a computer readable storage medium. Based on this understanding, the technical embodiments of the embodiments of the present disclosure essentially or the part that contributes to the prior art can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a number of instructions. This allows a fuel cell test device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the methods described in the various embodiments of the present disclosure. The aforementioned storage media include: U disk, mobile hard disk, read only memory (Read Only Memory, ROM), magnetic disk or optical disk and other media that can store program codes. In this way, the embodiments of the present disclosure are not limited to any specific combination of hardware and software.

Correspondingly, an embodiment of the present disclosure provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, the steps in the control method provided in the above-mentioned embodiments are implemented.

It should be pointed out here that the description of the above storage medium and device embodiments is similar to the description of the above method embodiment, and has similar beneficial effects as the method embodiment. For technical details not disclosed in the storage medium and device embodiments of the present disclosure, please refer to the description of the method embodiments of the present disclosure for understanding.

It should be noted that FIG. 6 is a schematic diagram of the hardware entity structure of a fuel cell test device in an embodiment of the present disclosure. As shown in FIG. 6, the hardware entity of the fuel cell test device 400 includes a processor 401 and a memory 403. Optionally, the fuel cell testing device 400 may further include a communication interface 402.

It can be understood that the memory 403 may be a volatile memory or a non-volatile memory, and may also include both volatile and non-volatile memory. Among them, the non-volatile memory can be a read-only memory (ROM, Read Only Memory), a programmable read-only memory (PROM, Programmable Read-Only Memory), an erasable programmable read-only memory (EPROM, Erasable Programmable Read- Only Memory, Electrically Erasable Programmable Read-Only Memory (EEPROM), Ferromagnetic Random Access Memory (FRAM), Flash Memory, Magnetic Surface Memory , CD-ROM, or CD-ROM (Compact Disc Read-Only Memory); magnetic surface memory can be magnetic disk storage or tape storage. The volatile memory may be a random access memory (RAM, Random Access Memory), which is used as an external cache. By way of exemplary but not restrictive description, many forms of RAM are available, such as static random access memory (SRAM, Static Random Access Memory), synchronous static random access memory (SSRAM, Synchronous Static Random Access Memory), and dynamic random access memory. Memory (DRAM, Dynamic Random Access Memory), Synchronous Dynamic Random Access Memory (SDRAM, Synchronous Dynamic Random Access Memory), Double Data Rate Synchronous Dynamic Random Access Memory (DDRSDRAM, Double Data Rate Synchronous Dynamic Random Access Memory), enhanced Type synchronous dynamic random access memory (ESDRAM, Enhanced Synchronous Dynamic Random Access Memory), synchronous connection dynamic random access memory (SLDRAM, SyncLink Dynamic Random Access Memory), direct memory bus random access memory (DRRAM, Direct Rambus Random Access Memory) ). The memory 403 described in the embodiments of the present disclosure is intended to include, but is not limited to, these and any other suitable types of memory.

The methods disclosed in the foregoing embodiments of the present disclosure may be applied to the processor 401 or implemented by the processor 401. The processor 401 may be an integrated circuit chip with signal processing capabilities. In the implementation process, the steps of the foregoing method can be completed by an integrated logic circuit of hardware in the processor 401 or instructions in the form of software. The aforementioned processor 401 may be a general-purpose processor, a digital signal processor (DSP, Digital Signal Processor), or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, and the like. The processor 401 may implement or execute various methods, steps, and logical block diagrams disclosed in the embodiments of the present disclosure. The general-purpose processor may be a microprocessor or any conventional processor or the like. The steps of the method disclosed in the embodiments of the present disclosure may be directly embodied as being executed and completed by a hardware decoding processor, or executed and completed by a combination of hardware and software modules in the decoding processor. The software module may be located in a storage medium, and the storage medium is located in the memory 403. The processor 401 reads the information in the memory 403 and completes the steps of the foregoing method in combination with its hardware.

In an exemplary embodiment, the fuel cell test device may be used by one or more application specific integrated circuits (ASIC, Application Specific Integrated Circuit), DSP, programmable logic device (PLD, Programmable Logic Device), and complex programmable logic device ( CPLD, Complex Programmable Logic Device, Field-Programmable Gate Array (FPGA, Field-Programmable Gate Array), general-purpose processor, controller, microcontroller (MCU, Micro Controller Unit), microprocessor (Microprocessor), or other The electronic component is implemented to perform the aforementioned method.

In the several embodiments provided in the present disclosure, it should be understood that the disclosed method and device may be implemented in other ways. The device embodiments described above are merely illustrative. For example, the division of the units is only a logical function division, and there may be other divisions in actual implementation, such as: multiple units or components can be combined, or It can be integrated into another observation, or some features can be ignored or not implemented. In addition, the communication connections between the displayed or discussed components may be indirect couplings or communication connections between devices or units through some interfaces, and may be electrical, mechanical, or other forms.

The units described above as separate components may or may not be physically separate, and the components displayed as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units; Some or all of the units can be selected according to actual needs to achieve the purpose of this embodiment.

Those of ordinary skill in the art can understand that all or part of the steps in the above method embodiments can be implemented by a program instructing relevant hardware. The foregoing program can be stored in a computer readable storage medium. When the program is executed, the execution includes The steps of the foregoing method embodiment; and the foregoing storage medium includes: various media that can store program codes, such as a mobile storage device, a read-only memory (ROM, Read-Only Memory), a magnetic disk, or an optical disk.

Alternatively, if the aforementioned integrated unit in the embodiment of the present disclosure is implemented in the form of a software functional unit and sold or used as an independent product, it can also be stored in a computer readable storage medium. Based on this understanding, the technical embodiments of the embodiments of the present disclosure essentially or the part that contributes to the prior art can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a number of instructions. This allows a fuel cell test device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the methods described in the various embodiments of the present disclosure. The aforementioned storage media include: removable storage devices, ROMs, magnetic disks or optical discs and other media that can store program codes.

The present disclosure is based on the safety control method, fuel cell test device, and computer storage medium described in the examples. Only the embodiments described in the present disclosure are taken as examples, but not limited to this, as long as the safety control method, fuel cell test device, and fuel cell test device are involved. Computer storage media are all within the protection scope of the present disclosure.

It should be understood that “one embodiment” or “an embodiment” mentioned throughout the specification means that a specific feature, structure, or characteristic related to the embodiment is included in at least one embodiment of the present disclosure. Therefore, the appearances of "in one embodiment" or "in an embodiment" in various places throughout the specification do not necessarily refer to the same embodiment. In addition, these specific features, structures or characteristics can be combined in one or more embodiments in any suitable manner. It should be understood that, in the various embodiments of the present disclosure, the size of the sequence number of the foregoing processes does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not be used in the embodiments of the present disclosure. The implementation process constitutes any limitation. The sequence numbers of the above-mentioned embodiments of the present disclosure are only for description, and do not represent the advantages and disadvantages of the embodiments.

It should be noted that in this article, the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements not only includes those elements, It also includes other elements not explicitly listed, or elements inherent to the process, method, article, or device. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other identical elements in the process, method, article, or device that includes the element.

The above are only specific implementations of the present disclosure, but the protection scope of the present disclosure is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present disclosure. It should be covered within the protection scope of the present disclosure. Therefore, the protection scope of the present disclosure should be subject to the protection scope of the claims.

Claims

A safety control method, the method is applied to a fuel cell test device, and the method includes:

The safety processing component obtains the safety related information of the fuel cell test device from the process processing component;

Judging whether the fuel cell test device has a first safety failure according to the safety-related information, and obtaining a first judgment result;

In the case where the first judgment result indicates that the fuel cell test device has a first safety fault, turn off other power supplies except the power supply of the safety processing component, and execute the first safety fault corresponding to the first safety fault. One troubleshooting;

The first fault processing includes at least one of the following: controlling the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to be in an off state, and controlling the nitrogen purge solenoid valve to be in an on state.
The method according to claim 1, wherein the abnormal safety related information corresponding to the first safety fault includes at least one of the following:

The wind force of the exhaust system in the fuel cell test device is less than a preset level;

The hydrogen concentration in the fuel cell test device exceeds a preset alarm concentration;

The emergency shutdown command of the fuel cell test device.
The method according to claim 1 or 2, wherein, in a case where the first judgment result indicates that the fuel cell test device does not have a first safety failure, the method further comprises:

The safety processing component and the process processing component determine whether the fuel cell test device has safety faults other than the first safety fault according to the safety-related information, and obtain a second judgment result;

In the case where the second judgment result indicates that the fuel cell test device has the other safety fault, perform fault processing corresponding to the other safety fault.
The method according to claim 3, wherein the other safety fault comprises: a second safety fault;

The second fault processing corresponding to the second safety fault includes at least one of the following: controlling the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to be in an off state, and controlling the nitrogen purge solenoid valve to be on Status, open Nitrogen to purge hydrogen pipes and air pipes within a preset time.
The method according to claim 4, wherein the abnormal safety related information corresponding to the second safety fault includes at least one of the following:

The pressure value of hydrogen exceeds the hydrogen pressure alarm setting value; the pressure value of air exceeds the air pressure alarm setting value; the pressure difference between hydrogen and air exceeds the alarm setting value of the hydrogen and air pressure difference; the inlet temperature of hydrogen exceeds the hydrogen inlet temperature Temperature alarm setting value; air intake temperature exceeds the air intake temperature alarm setting value; cooling water conductivity exceeds the cooling water conductivity alarm setting value; single-chip battery voltage exceeds the single-chip battery voltage setting range; single-chip The battery voltage is reversed; the electronic load current exceeds the electronic load current alarm setting value; the electronic load voltage exceeds the electronic load voltage alarm setting value; the electronic load power exceeds the electronic load power alarm setting value.
The method according to claim 4, wherein the other safety fault comprises: a third safety fault;

The third fault processing corresponding to the third safety fault includes at least one of the following: when the fuel cell test device is in the test process, the next test item is not started; when the fuel cell test device is not in the test process And if the third safety fault has not been processed, the next test project is not started; the first prompt message corresponding to the third safety fault is output.
The method according to claim 6, wherein the abnormal safety related information corresponding to the third safety fault includes at least one of the following:

The hydrogen water vapor separation filling level exceeds the hydrogen water vapor separation filling level alarm setting value; the air water vapor separation filling level exceeds the air water vapor separation filling level alarm setting value; the sensor on the hydrogen exhaust pipe is faulty, the air exhaust pipe There is a fault on the sensor, the hydrogen humidification filling level exceeds the hydrogen humidification filling level alarm setting value; the air humidification filling level exceeds the air humidification filling level alarm setting value; the hydrogen exhaust temperature exceeds the hydrogen exhaust temperature alarm setting The conductivity of the air humidification water exceeds the alarm setting value of the air humidification water conductivity; the conductivity of the hydrogen humidification water exceeds the alarm setting value of the hydrogen humidification water conductivity.
The method according to claim 6, wherein the other safety faults include: a fourth safety fault; the fourth safety fault is a fault that does not affect the operation of the fuel cell test device;

The fourth fault processing corresponding to the fourth safety fault includes: outputting second prompt information corresponding to the fourth safety fault.
A fuel cell testing device, the device comprising: a safety processing component, a process processing component and other components used for fuel cell testing, wherein:

The process processing component is configured to obtain safety-related information of the fuel cell test device, and send the safety-related information to the safety processing component; the safety-related information is information related to the other components;

The safety processing component is configured to determine, based on the safety-related information, whether the fuel cell test device has a first safety failure, and obtain a first determination result; when the first determination result indicates that the fuel cell test device has a first safety failure In the case of a safety fault, turn off other power supplies except the power supply of the safety processing component, and execute the first fault processing corresponding to the first safety fault; the first fault processing includes at least one of the following: The hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device are controlled to be in an off state, and the nitrogen purge solenoid valve is controlled to be in an on state.
The device according to claim 9, wherein the abnormal safety related information corresponding to the first safety fault includes at least one of the following:

The wind force of the exhaust system in the fuel cell test device is less than a preset level;

The hydrogen concentration in the fuel cell test device exceeds a preset alarm concentration;

The emergency shutdown command of the fuel cell test device.
The device according to claim 9 or 10, wherein, in the case where the first judgment result indicates that the fuel cell test device does not have a first safety failure;

The process processing component and the safety processing component are also used for judging whether the fuel cell test device has safety faults other than the first safety fault according to the safety-related information, and obtaining a second judgment result; If the second judgment result indicates that the fuel cell testing device has the other safety fault, perform fault processing corresponding to the other safety fault.
The device according to claim 11, wherein the other safety fault comprises: a second safety fault;

The second fault processing corresponding to the second safety fault includes at least one of the following: controlling the hydrogen supply solenoid valve and the air supply solenoid valve in the fuel cell test device to be in an off state, and controlling the nitrogen purge solenoid valve to be on Status, open Nitrogen to purge hydrogen pipes and air pipes within a preset time.
The device according to claim 12, wherein the abnormal safety related information corresponding to the second safety fault includes at least one of the following:

The pressure value of hydrogen exceeds the hydrogen pressure alarm setting value; the pressure value of air exceeds the air pressure alarm setting value; the pressure difference between hydrogen and air exceeds the alarm setting value of the hydrogen and air pressure difference; the inlet temperature of hydrogen exceeds the hydrogen inlet temperature Temperature alarm setting value; air intake temperature exceeds the air intake temperature alarm setting value; cooling water conductivity exceeds the cooling water conductivity alarm setting value; single-chip battery voltage exceeds the single-chip battery voltage setting range; single-chip The battery voltage is reversed; the electronic load current exceeds the electronic load current alarm setting value; the electronic load voltage exceeds the electronic load voltage alarm setting value; the electronic load power exceeds the electronic load power alarm setting value.
The device according to claim 12, wherein the other safety fault comprises: a third safety fault;

The third fault processing corresponding to the third safety fault includes at least one of the following: when the fuel cell test device is in the test process, the next test item is not started; when the fuel cell test device is not in the test process And if the third safety fault has not been processed, the next test project is not started; the first prompt message corresponding to the third safety fault is output.
The device according to claim 14, wherein the abnormal safety related information corresponding to the third safety fault includes at least one of the following:

The hydrogen water vapor separation filling level exceeds the hydrogen water vapor separation filling level alarm setting value; the air water vapor separation filling level exceeds the air water vapor separation filling level alarm setting value; the sensor on the hydrogen exhaust pipe is faulty, the air exhaust pipe There is a fault on the sensor, the hydrogen humidification filling level exceeds the hydrogen humidification filling level alarm setting value; the air humidification filling level exceeds the air humidification filling level alarm setting value; the hydrogen exhaust temperature exceeds the hydrogen exhaust temperature alarm setting The conductivity of the air humidification water exceeds the alarm setting value of the air humidification water conductivity; the conductivity of the hydrogen humidification water exceeds the alarm setting value of the hydrogen humidification water conductivity.
The device according to claim 14, wherein the other safety failures include: a fourth safety failure; the fourth safety failure is a failure that does not affect the operation of the fuel cell test device;

The fourth fault processing corresponding to the fourth safety fault includes: outputting second prompt information corresponding to the fourth safety fault.
A computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps in the method of any one of claims 1 to 8.